mmpool.org - 1.5% fee DGM/PPS - tx fees/vardiff/merge mine/tor

[raskul]

Pool is down because of this:

From: DD4BC TEAM <dd4bc@outlook.com>

Hello

Your mining server is extremely vulnerable to ddos attacks

I want to offer you info how to properly setup your protection, so that you can't be ddosed, at least not with so little power.
My price is 2 Bitcoin only.


Right now I'm running small (very small) attack which will not crash your server, but you should notice it in logs. Just check it.

If I increase the attack size, I could completely crash, it would drop all connections and damage would be big...
Don't worry, I will not do it.


I want to offer you  info on how I did it and what you have to do to prevent it. If interested pay me 2 BTC to 17aLGgw8AwJdqiBtMMG1QtQJgNQQkiyEsp


Thank you.

I suggest using a backup pool until the situation is resolved.

as long as stats have been paused and we don't lose any mining time, i'm happy to keep my 1st choice pool as mmpool. never had a problem and i've been here since the earlier days of bitparking.

some people are just c*nts.

[helipotte]

Pool is down because of this:

From: DD4BC TEAM <dd4bc@outlook.com>

Hello

Your mining server is extremely vulnerable to ddos attacks

I want to offer you info how to properly setup your protection, so that you can't be ddosed, at least not with so little power.
My price is 2 Bitcoin only.


Right now I'm running small (very small) attack which will not crash your server, but you should notice it in logs. Just check it.

If I increase the attack size, I could completely crash, it would drop all connections and damage would be big...
Don't worry, I will not do it.


I want to offer you  info on how I did it and what you have to do to prevent it. If interested pay me 2 BTC to 17aLGgw8AwJdqiBtMMG1QtQJgNQQkiyEsp


Thank you.

I suggest using a backup pool until the situation is resolved.

Extortion, nice.  People like this are the problem.

[AbuGarcia]

the way the mmpool frontend site is built, you have no other choice but lock down Ip address by the 500 last active users.  you can keep an email hotline open just in case the users cant connect, they can supply you with their current IP and user name via bitmail.


from the internet

"This particular hacker has been attacking us since July. We actually did pay him for a while to buy ourselves some time to put additional protections in place. When we decided to stop paying him, we managed to mitigate several attacks this week. He has escalated his attacks and his demand for money, and we felt that it was time to take a stand."

via: http://www.bitcoingg.com/nitrogen-sports-remains-resilient-amid-attacks-due-to-blackmails-extortions/

[xZork]

What a piece of shit, the scum of the earth.

Thanks for the update.

[onsightit]

RRL was incorporated into BIND name servers in version 9.9.4.

Hope you can fix it soon...

[philipma1957]

Well I am the top earner  around 3.33 btc if we make a block.  I would rather lose the entire 3.33 btc then have you pay this filth off.   

Just do me 1 favor I switched all my s-3's to ck's solo pool.  Could you pop me a pm when this clears. thanks.  philipma1957

[mmpool]

I've changed DNS to another server to put a temporary landing page in place. I'll update here and on that page periodically but I hope to have something in place in a few hours. At the least I will be able to re-enable Tor access until I resolve things.

[mmpool]

Could you pop me a pm when this clears. thanks.  philipma1957

Will do.

[philipma1957]

I've changed DNS to another server to put a temporary landing page in place. I'll update here and on that page periodically but I hope to have something in place in a few hours. At the least I will be able to re-enable Tor access until I resolve things.

good fight them.  what nasty people .

 i will keep looking at site.

[raskul]

I've changed DNS to another server to put a temporary landing page in place. I'll update here and on that page periodically but I hope to have something in place in a few hours. At the least I will be able to re-enable Tor access until I resolve things.

thanks for the updates. best wishes flushing this scumbag out.

[raskul]

might I also suggest that you contact the cybercrime dept of your local police.
Extortion is actually - highly illegal - even when it's 'just' bitcoin.

[philipma1957]

might I also suggest that you contact the cybercrime dept of your local police.
Extortion is actually - highly illegal - even when it's 'just' bitcoin.

  Depends on country the pool owner lives in.  but in general it is a criminal activity.  What kills me is the amount someone is doing this for. 2 coins.

 So for about 700 usd someone is willing to risk a lot. I know they think they are smart enough to not be caught , but  a lot of effort for a small amount.  Our pool earns a block a month if it is lucky and remember we have gone 1400 hours mining and not made a block. At our worst.  So paying this prick 2 coins and then we mine say 850 hours for the next block.  F him or her.

I wish he would bother someone else and get caught.

[IYFTech]

might I also suggest that you contact the cybercrime dept of your local police.
Extortion is actually - highly illegal - even when it's 'just' bitcoin.

We should all report our governments to the police then - cos they're constantly at it 

[philipma1957]

might I also suggest that you contact the cybercrime dept of your local police.
Extortion is actually - highly illegal - even when it's 'just' bitcoin.

We should all report our governments to the police then - cos they're constantly at it  

Well they have the most lawyers the most guns and the most money.


@ op 

 let me know if I can help in anyway.

[mmpool]

I've restored access to the pool via Tor. The Tor hidden service is phkttm64gbquasaq.onion. The pool website is available via this address and you can mine using stratum over Tor. To mine using stratum you can run cgminer using 'torify' or 'usewithtor':

usewithtor ./cgminer -o stratum+tcp://phkttm64gbquasaq.onion:3333 -u myuserid -p d=32
torify ./cgminer -o stratum+tcp://phkttm64gbquasaq.onion:3333 -u myuserid -p d=32

I hope to restore non-tor access at some point but this should provide a way to access your accounts and continue mining if you choose to do so.

[philipma1957]

I've restored access to the pool via Tor. The Tor hidden service is phkttm64gbquasaq.onion. The pool website is available via this address and you can mine using stratum over Tor. To mine using stratum you can run cgminer using 'torify' or 'usewithtor':

usewithtor ./cgminer -o stratum+tcp://phkttm64gbquasaq.onion:3333 -u myuserid -p d=32
torify ./cgminer -o stratum+tcp://phkttm64gbquasaq.onion:3333 -u myuserid -p d=32

I hope to restore non-tor access at some point but this should provide a way to access your accounts and continue mining if you choose to do so.

still skips over your pool what is wrong?

[mmpool]

still skips over your pool what is wrong?

Have you set tor up so that onion addresses resolve? If you're unable to do this I'll try and set up a proxy you can go through.

[philipma1957]

still skips over your pool what is wrong?

Have you set tor up so that onion addresses resolve? If you're unable to do this I'll try and set up a proxy you can go through.

don't know enough to do it. I setup tor and found the website  that is about it.

[mmpool]

don't know enough to do it. I setup tor and found the website  that is about it.

Under the 'Network' tab of that Miner configuration, is there a setting for SOCKS proxy?

[philipma1957]

don't know enough to do it. I setup tor and found the website  that is about it.

Under the 'Network' tab of that Miner configuration, is there a setting for SOCKS proxy?

okay clicked network tab

you  get an interface option with wan and lan I use lan   I am allowed to add an interface  can we do something here?


you get a wifi tab -----I don't do wifi

you get dhcp and dns

you get hostnames  --------- it is blank none added

static routes -----------------blank

firewall

diagnostics